Integer Underflow Vulnerability in FreeSWITCH Telecommunications Platform
CVE-2026-116788

8.2HIGH

Key Information:

Vendor

Signalwire

Status
Freeswitch
Vendor
CVE Published:
5 November 2026

What is CVE-2026-116788?

FreeSWITCH, an open-source telecommunications platform, has a vulnerability that arises from an integer underflow in the switch_xml_decode() function. This can lead to improper heap allocations when handling XML documents with entities that have empty replacement values. An unauthenticated attacker with access to a SIP profile that allows presence management and DTD processing can exploit this vulnerability by sending a specially crafted SIP PUBLISH request. This exploit may cause heap memory corruption, leading to the potential termination of the FreeSWITCH process and disruption of ongoing calls. The issue has been remediated in version 1.11.2.

Affected Version(s)

freeswitch < 1.11.2

References

https://github.com/signalwire/freeswitch/security/advisor...
x_refsource_CONFIRM
https://github.com/signalwire/freeswitch/commit/587474a15...
x_refsource_MISC
https://github.com/signalwire/freeswitch/releases/tag/v1....
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.